Prevent running CI when using the template into a private repository

[samansmink]

When creating a new private repository based on this template, default behaviour is to run CI on every push. This will quickly exhaust the user's CI minutes as our CI is currently on the heavy side.

We should either disable CI by default when using the template, or detect we are in a private repo and only run if the repo is public which should not count towards the user's limits